Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: qAMpXp/CrZWaUTz0lJuue+X1MZc/UceTsByhz/337I8=
Subject key identifier: 02:1C:6C:0E:92:14:EF:6A:97:44:0C:A1:CB:C8:65:D2:1E:04:BA:4E
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019EB9C660139BB909E5B1EBC2DB34C70DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 135B
Signing time: Fri 12 Jun 2026 03:00:46 +0000
Manifest this update: Fri 12 Jun 2026 03:00:46 +0000
Manifest next update: Sat 13 Jun 2026 03:00:46 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: Uf7F7kwBHUzkRaT1aS9HCaQR9RZeK5TJ+9XGw68EfNQ=)
2: 8tt6sbRcYdZ62Hlyx9KV5xcE06I.asa (hash: 0Y7iz76vgEOY5ho3DHxIE4tgSCKOh0nYjQCm1eEOdkw=)
3: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:60:13:9b:b9:09:e5:b1:eb:c2:db:34:c7:0d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jun 12 03:00:46 2026 GMT
Not After : Jun 13 03:00:46 2026 GMT
Subject: CN=021c6c0e9214ef6a97440ca1cbc865d21e04ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:22:c7:a0:9a:99:67:08:c3:42:22:f0:57:
62:12:b2:7f:9f:ce:93:ad:61:67:1b:47:53:74:ba:
6b:c6:80:b2:d3:18:b6:e0:33:8b:9d:97:3b:1f:e2:
ed:91:63:63:4f:71:04:fe:7e:ff:88:d2:b6:d3:ea:
ab:4d:ea:78:19:c8:67:1a:f4:71:a1:6d:cd:2c:ba:
f2:d9:6b:4f:f8:57:ff:61:5c:a5:d8:37:01:6b:28:
3a:a3:bb:53:7f:6e:88:e1:71:a4:8f:48:de:42:fc:
c5:38:48:60:69:b6:6f:53:ba:5c:a7:8c:30:14:6a:
32:be:46:dd:4e:b0:0f:a1:f0:91:b0:3c:9e:9b:41:
92:ed:4e:45:e8:d8:e1:55:8d:e7:a6:67:d1:42:ab:
1f:ec:0c:99:e2:a2:75:2a:69:2a:97:28:dc:16:ea:
f0:44:c4:b4:89:9f:e8:6a:76:ca:fb:da:30:9a:d0:
e6:db:eb:6e:3f:32:d7:87:90:90:aa:99:9b:70:7b:
09:88:69:96:44:3d:77:79:3d:6e:5d:24:2e:7a:78:
86:66:03:b6:82:a1:e7:76:f2:98:55:2f:b7:17:86:
08:bc:5c:20:e2:7c:17:80:5e:14:9e:17:fc:3e:ca:
93:f3:52:d0:65:9d:28:cb:25:1b:45:b1:7e:63:91:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:6C:0E:92:14:EF:6A:97:44:0C:A1:CB:C8:65:D2:1E:04:BA:4E
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:5a:a9:ea:f3:b8:4a:db:4b:0b:49:a9:1e:fe:66:89:42:
91:42:6a:6c:86:71:34:f4:1e:bd:6f:ed:7b:18:f8:57:3e:57:
4c:31:4e:7a:d8:ed:4d:0c:fd:66:24:f1:44:53:c6:e8:9d:15:
b9:eb:02:b9:d6:b8:42:43:5b:4a:f6:a6:5c:ab:64:d3:c5:ef:
33:06:ed:37:bd:b5:77:19:91:a5:a9:ec:3c:88:00:9b:76:89:
eb:8b:14:a4:b7:49:f9:81:6d:6b:69:06:c2:74:8e:50:30:04:
8d:d4:db:eb:78:c1:d3:e1:fa:d8:e3:32:c6:b0:eb:4f:0b:54:
fc:17:b7:f4:d8:4c:8e:88:c4:1a:94:31:e2:ea:b2:35:90:34:
33:df:02:9e:84:65:0b:5a:04:8e:b9:43:92:39:b2:46:76:cc:
cd:90:c9:8d:7d:3a:7f:01:6a:26:47:8a:d8:c3:20:74:93:6d:
54:92:10:ab:c1:bf:ea:91:ba:dd:1e:7f:34:16:6b:5f:6d:72:
91:b7:65:8f:a2:a1:95:27:3d:55:cf:0a:2a:44:44:90:92:da:
9e:dc:06:64:b2:42:5b:24:e5:86:20:4d:ff:a8:88:a9:cb:33:
d4:2d:13:46:70:5a:62:bd:59:73:d9:64:b4:15:ff:32:e8:81:
5a:0d:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:05:28 2026 by rpki-client